skill-security-scanner
Security scanner for OpenClaw skills. Use when installing, updating, or auditing skills to detect malicious backdoors, suspicious code patterns, data exfiltration risks, and security vulnerabilities. Automatically analyzes Python/JavaScript/Shell code for dangerous functions (eval, exec, system calls), network requests, file operations, environment variable access, obfuscation patterns, and known attack signatures. Provides security score and installation recommendations.
Install via CLI (Recommended)
clawhub install openclaw/skills/skills/cookiemikeliu/skill-security-scanner-cleanSkill Security Scanner
Protect your OpenClaw installation from malicious skills. This scanner performs static analysis on skill code to detect:
- Code Execution Threats:
eval,exec,os.system,subprocesscalls - Data Exfiltration: Hidden network requests, suspicious URLs, IP connections
- System Compromise: File deletion, permission changes, privilege escalation
- Credential Theft: Environment variable access, secret harvesting
- Cryptojacking: Mining malware, suspicious compute patterns
- Obfuscation: Hidden code, base64 encoding, minification
- Spyware: Keyloggers, screen capture, surveillance features
Quick Start
# Basic scan
python scripts/security_scanner.py /path/to/skill
# Strict mode (catches more suspicious patterns)
python scripts/security_scanner.py /path/to/skill --strict
# Save JSON report
python scripts/security_scanner.py /path/to/skill --format json -o report.json
# Generate markdown report
python scripts/security_scanner.py /path/to/skill --format markdown -o report.md
Understanding Results
Verdict Levels
| Verdict | Emoji | Meaning | Action |
|---|---|---|---|
| PASS | 🟢 | No critical issues found | Safe to install |
| REVIEW | 🟡 | Some concerns, review recommended | Check findings before installing |
| WARNING | 🟠 | High-risk patterns detected | Strongly reconsider installation |
| REJECT | 🔴 | Critical threats identified | DO NOT INSTALL |
Security Score
- 90-100: Excellent - minimal risk
- 70-89: Good - minor issues
- 50-69: Fair - requires review
- 0-49: Poor - significant risks
Detection Rules
Critical (🔴)
| Rule | Description | Example |
|---|---|---|
| EXEC001 | Code execution functions | eval(), exec(), compile() |
| SUSPICIOUS001 | Keylogger functionality | pynput, keyboard modules |
| SUSPICIOUS003 | Cryptocurrency mining | mining, bitcoin, stratum+tcp |
High (🟠)
| Rule | Description | Example |
|---|---|---|
| EXEC002 | System command execution | os.system(), subprocess.call() |
| NET002 | Raw socket connections | socket.connect() |
| ENV001 | Sensitive credential access | os.environ['PASSWORD'] |
| OBF001 | Code obfuscation | Base64, hex-encoded code |
| SUSPICIOUS002 | Screen capture | pyautogui.screenshot() |
| NET004 | Short URL usage | bit.ly, tinyurl links |
Medium (🟡)
| Rule | Description | Example |
|---|---|---|
| NET001 | HTTP network requests | requests.get(), fetch() |
| ENV002 | Environment enumeration | os.environ.items() |
| FILE001 | File deletion | os.remove(), shutil.rmtree() |
| DATA001 | Unsafe deserialization | pickle.loads(), yaml.load() |
| NET003 | Hardcoded IP addresses | Direct IP in URLs |
| OBF002 | Base64 encoded blocks | Large base64 strings |
Low/Info (🔵/⚪)
Metadata
Not sure this is the right skill?
Describe what you want to build — we'll match you to the best skill from 16,000+ options.
Find the right skillPaste this into your clawhub.json to enable this plugin.
{
"plugins": {
"official-cookiemikeliu-skill-security-scanner-clean": {
"enabled": true,
"auto_update": true
}
}
}